Exploitation with Metasploit Flashcards

Which Meterpreter command lists all running processes on the compromised Windows host?

Answer: ps

The 'ps' command in Meterpreter displays a list of all running processes including PID, name, and user.

What is process migration in Meterpreter used for?

Answer: Moving the Meterpreter session into a different running process

Process migration moves the Meterpreter agent into another PID, helping stabilize the session or avoid process death.

Which msfvenom flag is used to specify the number of times an encoder is applied to a payload?

Answer: -i

The -i flag specifies the number of encoding iterations, applying the encoder multiple times to increase obfuscation.

In Metasploit, what does the 'info' command display about a selected module?

Answer: Detailed description, options, targets, and references for the module

'info' shows the full module description including author, CVE references, all options, and supported targets.

Which Metasploit auxiliary module can brute-force SSH login credentials?

Answer: auxiliary/scanner/ssh/ssh_login

auxiliary/scanner/ssh/ssh_login performs credential brute-forcing against SSH services using wordlists.

What does the 'route add' command do within the Metasploit framework?

Answer: Routes traffic through a Meterpreter session to reach internal networks

'route add' tells Metasploit to send traffic to a subnet through an existing session, enabling pivoting into internal networks.

What Meterpreter command retrieves the target's hostname, OS version, and architecture in one output?

Answer: sysinfo

'sysinfo' returns the computer name, OS version, architecture, system language, and Meterpreter version in a single command.